Bug 884666

Summary:	sudo: if first full refresh fails, schedule another first full refresh
Product:	Red Hat Enterprise Linux 6	Reporter:	Dmitri Pal <dpal>
Component:	sssd	Assignee:	Jakub Hrozek <jhrozek>
Status:	CLOSED ERRATA	QA Contact:	Nikolai Kondrashov <nikolai.kondrashov>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.4	CC:	grajaiya, jgalipea, nikolai.kondrashov, okos, pbrezina
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	sssd-1.9.2-51.el6	Doc Type:	Bug Fix
Doc Text:	No documentation needed.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-02-21 09:42:18 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	895654

Description Dmitri Pal 2012-12-06 14:20:44 UTC

This bug is created as a clone of upstream ticket:
https://fedorahosted.org/sssd/ticket/1689

When SSSD starts we need to perform sudo full refresh in order to obtain current USN values. Without these values, smart refresh won't work correctly.

At the moment, if the first full refresh fails because of server error (e.g. offline), we just continue as planned - i.e. schedule new full refresh after a long period (like 6 hours) and schedule smart refresh in short period (15 minutes). This means that the smart refresh won't work for several hours, until the full refresh is performed.

We should reset the state and try to perform the first full refresh again after a short interval.

Comment 1 Jakub Hrozek 2012-12-11 17:49:30 UTC

Oops, wrong bug. Flipping back to assigned, I confused this bug with one that fixes #1682.

Comment 3 Nikolai Kondrashov 2013-01-09 13:40:28 UTC

Verified as fixed with the following packages:

libsss_idmap-1.9.2-59.el6.x86_64
sssd-client-1.9.2-59.el6.x86_64
sudo-1.8.6p3-6.el6.x86_64
sssd-1.9.2-59.el6.x86_64
libsss_sudo-1.9.2-59.el6.x86_64

Relevant sudo suite output:

:: [   PASS   ] :: full_refresh_init_retry

Comment 4 errata-xmlrpc 2013-02-21 09:42:18 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2013-0508.html